Format: 1.8 Date: Thu, 06 Oct 2016 10:15:41 -0400 Source: c-ares Binary: libc-ares-dev libc-ares2 Architecture: source Version: 1.10.0-2ubuntu0.1 Distribution: trusty-security Urgency: medium Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: libc-ares-dev - asynchronous name resolver - development files libc-ares2 - asynchronous name resolver Launchpad-Bugs-Fixed: 1629085 Changes: c-ares (1.10.0-2ubuntu0.1) trusty-security; urgency=medium . * SECURITY UPDATE: denial of service and possible execution via hostname with an escaped trailing dot (LP: #1629085) - debian/patches/CVE-2016-5180.patch: properly handle escaped dot in ares_create_query.c. - CVE-2016-5180 Checksums-Sha1: 0ae9ad8d58f62daae76183b5892c8449e19db7e4 2046 c-ares_1.10.0-2ubuntu0.1.dsc 7d3d84cd14d8eb08027c29406d9b37fcd82e857d 7351 c-ares_1.10.0-2ubuntu0.1.debian.tar.gz Checksums-Sha256: e32ff73cc32c9a5016355d9f641bd54839386ba18ff2abee521fb16a8c52d389 2046 c-ares_1.10.0-2ubuntu0.1.dsc 7edb12ca7758f94f861d8cf0f2ca135a3c44bd671f6149c2267b8e3250dec7d6 7351 c-ares_1.10.0-2ubuntu0.1.debian.tar.gz Files: 02cebe3e8b69cb79d005469f3165328c 2046 libs extra c-ares_1.10.0-2ubuntu0.1.dsc 69a527d92a4c7505ea6347adabc13d79 7351 libs extra c-ares_1.10.0-2ubuntu0.1.debian.tar.gz Original-Maintainer: Andreas Schuldei